$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa File: 9721a2b0-73bd-3612-b051-3fefdae4d925.roa (raw, json) Hash identifier: oelGt7bg1wYRiZSj+UK0HW6XOxr8n5FQy1txYVtiE/M= Subject key identifier: FE:0E:D2:CD:0B:14:1F:F3:09:86:08:49:5A:14:37:CA:EA:40:F7:2E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584A42758630712545337F03B500 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 19637 IP address blocks: 192.19.66.0/24 maxlen: 24 192.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:86:30:71:25:45:33:7f:03:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=291c6f92-4a72-476d-be2d-6b545195970d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:1e:6d:51:0f:92:da:ec:1b:73:57:4b:e4: 99:86:40:fd:e1:ca:2f:b1:20:2d:2d:ca:f1:dd:58: a8:f6:f7:b6:71:7a:a7:42:9c:84:d3:63:18:81:25: f3:c1:06:9b:71:10:b8:d5:a5:4f:b7:02:c2:13:98: e5:67:be:62:18:2a:c0:49:d9:1b:49:c9:e2:23:dc: 90:bb:c9:e0:56:fc:44:4c:24:1a:d5:16:77:42:5c: 8c:9c:b4:22:48:df:b7:c9:b3:b2:84:8b:0c:5c:13: 73:47:6b:4d:90:8b:c5:c2:9c:64:41:15:30:18:9c: e0:2d:81:07:0e:03:0b:58:c8:e3:85:71:d4:ab:4a: 4a:81:5c:d5:dc:6d:10:0a:27:ab:fc:cc:41:1d:46: fe:ba:a0:d0:d3:10:c1:d4:20:2d:04:be:ee:9d:2f: de:0d:b1:72:7b:2a:a7:ea:88:65:c0:00:50:ca:d8: 7b:f2:62:b7:f1:d7:46:b5:23:95:06:e6:5d:2e:ea: 4b:68:30:e4:50:47:14:24:26:18:be:a9:71:b7:00: 59:0b:16:a8:ba:f7:48:0e:1d:72:30:7f:e9:40:fd: 31:27:fb:4c:b7:c4:cf:ac:ea:cf:9f:d5:14:c3:8d: 2a:3b:3b:62:ca:4c:66:e1:44:f4:c2:9b:a0:5c:65: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0E:D2:CD:0B:14:1F:F3:09:86:08:49:5A:14:37:CA:EA:40:F7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.66.0/24 192.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:16:bf:6a:7f:8f:dc:d6:81:7b:0b:ee:75:53:0c:eb:a1:f6: b9:8e:a8:6b:de:3e:6b:70:98:01:e7:eb:2a:92:35:23:5a:c8: 1d:1e:08:d1:ce:41:d1:ad:63:94:80:02:19:64:74:77:f2:09: 52:da:0f:78:f7:50:36:e8:86:63:a8:c6:a3:c6:2d:78:9b:e4: 27:15:e4:cc:ed:4c:45:d6:68:45:3e:92:12:f4:23:1f:b3:33: 56:f7:fc:fa:db:02:fd:83:ee:5b:58:84:9f:0b:41:3e:54:b7: d2:fd:ff:2a:22:c9:fd:04:e8:b3:24:3e:fb:5a:a7:e2:1b:54: 9c:95:5c:6c:31:93:dc:cc:28:93:54:79:fa:3f:eb:be:df:19: b9:2b:d0:7c:83:2b:4a:d8:40:a4:51:5e:74:e0:90:b3:b4:b6: a4:58:12:b0:73:d2:16:9d:57:41:1e:bb:95:8c:64:fa:f9:c5: 9d:53:c0:46:0f:0a:b9:43:11:e1:96:b0:d6:49:91:ec:7f:0a: 13:d5:03:24:14:84:33:91:de:5a:12:8a:81:2e:47:6f:81:c3: 00:bb:8b:ab:28:b8:83:d5:d0:cb:c3:09:0b:ca:88:78:10:3f: f6:b5:69:83:4f:0b:e1:9f:d1:75:26:12:5c:3e:b3:b2:00:e7: d7:79:a1:bc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpCdYYwcSVFM38DtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MjkxYzZmOTItNGE3Mi00NzZkLWJlMmQtNmI1NDUxOTU5NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrUebVEPktrsG3NXS+SZhkD94covsSAtLcrx 3Vio9ve2cXqnQpyE02MYgSXzwQabcRC41aVPtwLCE5jlZ75iGCrASdkbScniI9yQ u8ngVvxETCQa1RZ3QlyMnLQiSN+3ybOyhIsMXBNzR2tNkIvFwpxkQRUwGJzgLYEH DgMLWMjjhXHUq0pKgVzV3G0QCier/MxBHUb+uqDQ0xDB1CAtBL7unS/eDbFyeyqn 6ohlwABQyth78mK38ddGtSOVBuZdLupLaDDkUEcUJCYYvqlxtwBZCxaouvdIDh1y MH/pQP0xJ/tMt8TPrOrPn9UUw40qOztiykxm4UT0wpugXGWFLwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFP4O0s0LFB/zCYYISVoUN8rqQPcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvOTcyMWEyYjAtNzNiZC0z NjEyLWIwNTEtM2ZlZmRhZTRkOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwBNCAwQA wBPEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEwWv2p/j9zWgXsL7nVTDOuh9rmOqGvePmtwmAHn6yqSNSNa yB0eCNHOQdGtY5SAAhlkdHfyCVLaD3j3UDbohmOoxqPGLXib5CcV5MztTEXWaEU+ khL0Ix+zM1b3/PrbAv2D7ltYhJ8LQT5Ut9L9/yoiyf0E6LMkPvtap+IbVJyVXGwx k9zMKJNUefo/677fGbkr0HyDK0rYQKRRXnTgkLO0tqRYErBz0hadV0Eeu5WMZPr5 xZ1TwEYPCrlDEeGWsNZJkex/ChPVAyQUhDOR3loSioEuR2+BwwC7i6souIPV0MvD CQvKiHgQP/a1aYNPC+Gf0XUmElw+s7IA59d5obw= -----END CERTIFICATE-----Generated at Mon Jun 30 12:31:55 2025 by rpki-client